Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa
File:                     323830343a333231383a3a2f33322d3332203d3e20323635303535.roa (raw, json)
Hash identifier:          95kYaGt+bMN1X78e4L7LmSGsUHZfCiZAgSRPKSTCGyU=
Subject key identifier:   4F:AB:20:35:8C:62:65:30:57:C0:B4:BD:52:69:66:BD:08:7E:81:7E
Certificate issuer:       /CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
Certificate serial:       397985B6307A0268294AD6032392E638370ADFC2
Authority key identifier: E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa
Signing time:             Mon 19 Jun 2023 13:29:45 +0000
ROA not before:           Mon 19 Jun 2023 13:24:45 +0000
ROA not after:            Mon 17 Jun 2024 13:29:45 +0000
asID:                     265055
IP address blocks:        2804:3218::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:79:85:b6:30:7a:02:68:29:4a:d6:03:23:92:e6:38:37:0a:df:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
        Validity
            Not Before: Jun 19 13:24:45 2023 GMT
            Not After : Jun 17 13:29:45 2024 GMT
        Subject: CN=4FAB20358C62653057C0B4BD526966BD087E817E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:0a:21:93:85:79:1a:06:04:5b:bd:bd:eb:
                    d8:88:20:c5:d0:1d:a6:54:0f:ed:43:0a:a9:a0:bd:
                    61:d7:30:05:e1:4c:36:fa:2b:90:59:f1:48:04:ac:
                    41:e3:78:44:0f:1c:e4:72:35:7e:26:63:ed:9b:a5:
                    bf:b7:e1:55:ca:01:8a:3d:44:88:20:16:e1:9b:8f:
                    83:48:0b:c2:b0:8e:9b:dc:df:1e:77:9f:95:45:ea:
                    ac:0a:40:34:3f:df:a9:7e:41:bf:c4:29:20:67:f9:
                    f2:99:62:6b:e6:1f:7d:c4:d9:e3:65:de:a2:9b:d5:
                    20:90:a3:50:dd:53:18:56:03:d2:14:53:f9:c7:d6:
                    9e:53:04:6c:bb:ac:e4:f2:a7:d4:4f:4b:7f:0a:cb:
                    d8:4e:2f:8e:36:cc:f5:c2:2c:84:cf:87:a0:ad:6d:
                    04:61:ae:1d:04:d5:92:cb:01:1d:3b:3d:1a:24:f1:
                    e1:fd:98:a4:43:b4:18:44:b0:b1:75:db:bb:41:fe:
                    b6:02:96:9d:26:9e:44:53:24:9d:1b:e4:88:80:d3:
                    e4:3a:96:4b:cd:ff:ff:a0:27:4d:e2:8b:4d:9c:6c:
                    13:0b:d7:5b:cb:04:14:eb:9a:19:85:77:92:16:82:
                    25:be:2a:a0:cb:56:14:6a:7c:7d:66:c3:71:99:59:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:20:35:8C:62:65:30:57:C0:B4:BD:52:69:66:BD:08:7E:81:7E
            X509v3 Authority Key Identifier:
                keyid:E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3218::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:f4:fa:b3:87:d4:cc:e1:43:da:33:1a:57:de:bf:5b:99:
         f8:5a:11:3c:2d:d1:1b:13:fd:c0:6c:07:36:f2:fa:a3:58:49:
         48:b3:87:ab:cd:48:f4:14:b5:6d:7d:ce:13:f8:cb:63:33:9e:
         f2:55:ba:2d:37:74:74:cc:a7:bd:a5:01:80:02:9a:36:84:b2:
         b1:91:f3:ff:11:44:94:ca:22:93:80:62:f4:2b:ee:c0:d1:4a:
         5c:1d:9e:79:b6:20:d4:6f:c9:e6:af:ec:02:f2:74:b4:e5:91:
         4e:84:ba:f5:36:75:0a:18:56:ac:f6:61:0f:c8:d7:22:9c:bd:
         c8:69:6a:e6:35:12:61:60:26:8b:e1:cb:eb:b9:6e:48:7f:a0:
         cc:45:da:8f:70:ec:6b:29:d1:0b:81:25:9c:39:aa:fb:53:18:
         1d:c9:c7:d4:3c:8b:4a:52:7f:ba:d3:da:0f:4d:a9:c9:97:14:
         af:7d:4a:14:d6:e6:40:cb:7f:52:a5:73:a6:57:6e:9d:93:f7:
         24:43:8e:49:45:91:b1:19:c3:97:2f:65:51:df:e3:24:d7:6a:
         f7:54:b6:45:84:7d:ea:a6:47:82:ed:0e:4c:a0:e4:32:eb:4a:
         ee:3a:21:a7:17:9b:ae:0a:9a:ff:93:c6:9a:1b:a4:a5:16:d9:
         d8:99:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----